@sixb/core 0.1.21 → 0.1.22

package/dist/artifacts/live-sheet.d.ts

@@ -0,0 +1,65 @@
+import type { CsvTable } from "./csv";
+import type { ArtifactQueryProperty, ArtifactQuerySchema } from "./queries";
+import { type SheetColumnType, type WorkbookSheet } from "./workbook";
+/**
+ * A live sheet laid out against what its query's rows hold: publishing checks it as its author
+ * sees the rows, and the viewer draws it as each reader does.
+ */
+export interface LiveSheetLayout {
+    /**
+     * The sheet with a format for every column, as a CSV sheet's workbook gives them: what the
+     * publish rules, the grid and the charts read.
+     */
+    readonly sheet: WorkbookSheet;
+    /** Each column, in order, with what it shows. */
+    readonly columns: readonly LiveSheetColumn[];
+    /** The first column that does not lay out, in the words publishing refuses it with; or null. */
+    readonly problem: string | null;
+}
+export interface LiveSheetColumn {
+    readonly name: string;
+    /** The property the column shows, of the rows or of what `linkId` reaches; none when computed. */
+    readonly from?: {
+        readonly linkId?: string;
+        readonly propertyId: string;
+    };
+    /** Whether the rows hold no such property for this reader: every cell of it is locked. */
+    readonly missing: boolean;
+}
+/** What a row of a query's result holds, as core reads it and as the API serializes it. */
+export interface LiveSheetRow {
+    readonly properties: Readonly<Record<string, unknown>>;
+    /** The properties left out because the reader is not cleared for them. */
+    readonly redactions?: Readonly<Record<string, unknown>>;
+    readonly links?: Readonly<Record<string, LiveSheetRow | readonly LiveSheetRow[] | null>>;
+}
+/** A live sheet's rows as a sheet's CSV would hold them, and the cells the reader may not see. */
+export interface LiveSheetTable {
+    /** Each cell as a CSV cell holds its value, computed columns empty. */
+    readonly table: CsvTable;
+    /**
+     * By row, the columns of the cells the reader may not see: drawn locked, never as empty. A
+     * computed cell that reads a locked one is locked too.
+     */
+    readonly locked: ReadonlyMap<number, ReadonlySet<number>>;
+}
+/**
+ * The column type a property's values take in a sheet: numbers, dates, true or false, an enum's
+ * values as tags, and anything else as text. The ontology names no money or ratio, so a number is
+ * a number; a column that wants a currency says so.
+ */
+export declare function sheetColumnType(property: ArtifactQueryProperty): SheetColumnType;
+/**
+ * Lays a live sheet out against its query's schema: each column's property, and its type, its
+ * property's unless the workbook gives one. A column whose property the schema lacks shows locked
+ * cells, and `problem` names the first that does not lay out.
+ */
+export declare function liveSheetColumns(sheet: WorkbookSheet, schema: ArtifactQuerySchema): LiveSheetLayout;
+/**
+ * A query's rows as a live sheet shows them: each column's value written as a CSV cell holds it,
+ * so the grid, the charts and the downloads read them as they read a CSV sheet's. A value the
+ * reader is not cleared for is a locked cell, as is every cell of a column the reader's rows do
+ * not hold.
+ */
+export declare function liveSheetTable(layout: LiveSheetLayout, rows: readonly LiveSheetRow[]): LiveSheetTable;
+//# sourceMappingURL=live-sheet.d.ts.map

package/dist/artifacts/live-sheet.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"live-sheet.d.ts","sourceRoot":"","sources":["../../src/artifacts/live-sheet.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,QAAQ,EAAE,MAAM,OAAO,CAAA;AAErC,OAAO,KAAK,EAAE,qBAAqB,EAAE,mBAAmB,EAAE,MAAM,WAAW,CAAA;AAC3E,OAAO,EAIL,KAAK,eAAe,EAIpB,KAAK,aAAa,EACnB,MAAM,YAAY,CAAA;AAEnB;;;GAGG;AACH,MAAM,WAAW,eAAe;IAC9B;;;OAGG;IACH,QAAQ,CAAC,KAAK,EAAE,aAAa,CAAA;IAC7B,iDAAiD;IACjD,QAAQ,CAAC,OAAO,EAAE,SAAS,eAAe,EAAE,CAAA;IAC5C,gGAAgG;IAChG,QAAQ,CAAC,OAAO,EAAE,MAAM,GAAG,IAAI,CAAA;CAChC;AAED,MAAM,WAAW,eAAe;IAC9B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;IACrB,kGAAkG;IAClG,QAAQ,CAAC,IAAI,CAAC,EAAE;QAAE,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;QAAC,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAA;KAAE,CAAA;IACzE,0FAA0F;IAC1F,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAA;CAC1B;AAED,2FAA2F;AAC3F,MAAM,WAAW,YAAY;IAC3B,QAAQ,CAAC,UAAU,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAA;IACtD,0EAA0E;IAC1E,QAAQ,CAAC,UAAU,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAA;IACvD,QAAQ,CAAC,KAAK,CAAC,EAAE,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,YAAY,GAAG,SAAS,YAAY,EAAE,GAAG,IAAI,CAAC,CAAC,CAAA;CACzF;AAED,kGAAkG;AAClG,MAAM,WAAW,cAAc;IAC7B,uEAAuE;IACvE,QAAQ,CAAC,KAAK,EAAE,QAAQ,CAAA;IACxB;;;OAGG;IACH,QAAQ,CAAC,MAAM,EAAE,WAAW,CAAC,MAAM,EAAE,WAAW,CAAC,MAAM,CAAC,CAAC,CAAA;CAC1D;AAED;;;;GAIG;AACH,wBAAgB,eAAe,CAAC,QAAQ,EAAE,qBAAqB,GAAG,eAAe,CAgBhF;AAED;;;;GAIG;AACH,wBAAgB,gBAAgB,CAC9B,KAAK,EAAE,aAAa,EACpB,MAAM,EAAE,mBAAmB,GAC1B,eAAe,CAgDjB;AA4ED;;;;;GAKG;AACH,wBAAgB,cAAc,CAC5B,MAAM,EAAE,eAAe,EACvB,IAAI,EAAE,SAAS,YAAY,EAAE,GAC5B,cAAc,CAyBhB"}

package/dist/artifacts/outline.d.ts

@@ -2,7 +2,7 @@
  * What a version contains, read from its files when it is published. Addresses resolve against
  * it, and previews and hover cards show it without opening the files.
  */
-export type ArtifactOutline = DocumentOutline | SheetOutline | SlidesOutline | FileOutline;
+export type ArtifactOutline = DocumentOutline | SheetOutline | SlidesOutline | PageOutline | CanvasOutline | FileOutline;
 export interface DocumentOutline {
     readonly kind: "document";
     readonly headings: readonly DocumentHeading[];
@@ -21,8 +21,11 @@ export interface SheetOutline {
 }
 export interface SheetSummary {
     readonly name: string;
+    /** The rows of its CSV; none for a live sheet, whose rows are each reader's. */
     readonly rows: number;
     readonly columns: readonly string[];
+    /** A live sheet's query, whose rows it shows. */
+    readonly query?: string;
 }
 export interface SlidesOutline {
     readonly kind: "slides";
@@ -31,6 +34,29 @@ export interface SlidesOutline {
         readonly title?: string;
     }[];
 }
+export interface PageOutline {
+    readonly kind: "page";
+    /** The page's `<title>`, else its first heading. */
+    readonly title?: string;
+}
+export interface CanvasOutline {
+    readonly kind: "canvas";
+    /** The boards and sections an address can name, by id, in the canvas's order. */
+    readonly items: readonly CanvasOutlineItem[];
+}
+export type CanvasOutlineItem = {
+    readonly id: string;
+    readonly type: "board";
+    readonly title?: string;
+    /** The HTML file it shows, and its size: what its frame serves, and the shape it embeds at. */
+    readonly file: string;
+    readonly w: number;
+    readonly h: number;
+} | {
+    readonly id: string;
+    readonly type: "section";
+    readonly title?: string;
+};
 export interface FileOutline {
     readonly kind: "file";
     readonly mediaType: string;

package/dist/artifacts/outline.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"outline.d.ts","sourceRoot":"","sources":["../../src/artifacts/outline.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,MAAM,MAAM,eAAe,GAAG,eAAe,GAAG,YAAY,GAAG,aAAa,GAAG,WAAW,CAAA;AAE1F,MAAM,WAAW,eAAe;IAC9B,QAAQ,CAAC,IAAI,EAAE,UAAU,CAAA;IACzB,QAAQ,CAAC,QAAQ,EAAE,SAAS,eAAe,EAAE,CAAA;CAC9C;AAED,MAAM,WAAW,eAAe;IAC9B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;IACtB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;IACrB,wDAAwD;IACxD,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;CACtB;AAED,MAAM,WAAW,YAAY;IAC3B,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAA;IACtB,QAAQ,CAAC,MAAM,EAAE,SAAS,YAAY,EAAE,CAAA;IACxC,wDAAwD;IACxD,QAAQ,CAAC,MAAM,EAAE,SAAS,MAAM,EAAE,CAAA;CACnC;AAED,MAAM,WAAW,YAAY;IAC3B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;IACrB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;IACrB,QAAQ,CAAC,OAAO,EAAE,SAAS,MAAM,EAAE,CAAA;CACpC;AAED,MAAM,WAAW,aAAa;IAC5B,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAA;IACvB,6EAA6E;IAC7E,QAAQ,CAAC,MAAM,EAAE,SAAS;QAAE,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAA;KAAE,EAAE,CAAA;CACxD;AAED,MAAM,WAAW,WAAW;IAC1B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;IACrB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;CAC3B;AAED;;;;GAIG;AACH,wBAAgB,oBAAoB,IAAI,CAAC,IAAI,EAAE,MAAM,KAAK,MAAM,CAc/D"}
+{"version":3,"file":"outline.d.ts","sourceRoot":"","sources":["../../src/artifacts/outline.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,MAAM,MAAM,eAAe,GACvB,eAAe,GACf,YAAY,GACZ,aAAa,GACb,WAAW,GACX,aAAa,GACb,WAAW,CAAA;AAEf,MAAM,WAAW,eAAe;IAC9B,QAAQ,CAAC,IAAI,EAAE,UAAU,CAAA;IACzB,QAAQ,CAAC,QAAQ,EAAE,SAAS,eAAe,EAAE,CAAA;CAC9C;AAED,MAAM,WAAW,eAAe;IAC9B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;IACtB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;IACrB,wDAAwD;IACxD,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;CACtB;AAED,MAAM,WAAW,YAAY;IAC3B,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAA;IACtB,QAAQ,CAAC,MAAM,EAAE,SAAS,YAAY,EAAE,CAAA;IACxC,wDAAwD;IACxD,QAAQ,CAAC,MAAM,EAAE,SAAS,MAAM,EAAE,CAAA;CACnC;AAED,MAAM,WAAW,YAAY;IAC3B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;IACrB,gFAAgF;IAChF,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;IACrB,QAAQ,CAAC,OAAO,EAAE,SAAS,MAAM,EAAE,CAAA;IACnC,iDAAiD;IACjD,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAA;CACxB;AAED,MAAM,WAAW,aAAa;IAC5B,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAA;IACvB,6EAA6E;IAC7E,QAAQ,CAAC,MAAM,EAAE,SAAS;QAAE,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAA;KAAE,EAAE,CAAA;CACxD;AAED,MAAM,WAAW,WAAW;IAC1B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;IACrB,oDAAoD;IACpD,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAA;CACxB;AAED,MAAM,WAAW,aAAa;IAC5B,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAA;IACvB,iFAAiF;IACjF,QAAQ,CAAC,KAAK,EAAE,SAAS,iBAAiB,EAAE,CAAA;CAC7C;AAED,MAAM,MAAM,iBAAiB,GACzB;IACE,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAA;IACnB,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAA;IACtB,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAA;IACvB,+FAA+F;IAC/F,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;IACrB,QAAQ,CAAC,CAAC,EAAE,MAAM,CAAA;IAClB,QAAQ,CAAC,CAAC,EAAE,MAAM,CAAA;CACnB,GACD;IAAE,QAAQ,CAAC,EAAE,EAAE,MAAM,CAAC;IAAC,QAAQ,CAAC,IAAI,EAAE,SAAS,CAAC;IAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,MAAM,CAAA;CAAE,CAAA;AAE9E,MAAM,WAAW,WAAW;IAC1B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAA;IACrB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;CAC3B;AAED;;;;GAIG;AACH,wBAAgB,oBAAoB,IAAI,CAAC,IAAI,EAAE,MAAM,KAAK,MAAM,CAc/D"}

package/dist/artifacts/publish/index.d.ts

@@ -1,5 +1,7 @@
 /** Publishing for this repo's packages: the Agent publishes through the same checks as the API. */
+export { artifactAccessRule, artifactQueryChecker } from "../execution";
 export { isArtifactId } from "../ids";
 export { ARTIFACT_LIMITS } from "../limits";
+export { artifactQueryName } from "../queries";
 export { artifactVersionWarnings, type PreparedArtifactVersion, type PublishArtifactInput, prepareArtifactVersion, publishArtifact, storeArtifactVersion, } from "./publish";
 //# sourceMappingURL=index.d.ts.map

package/dist/artifacts/publish/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/artifacts/publish/index.ts"],"names":[],"mappings":"AAAA,mGAAmG;AAEnG,OAAO,EAAE,YAAY,EAAE,MAAM,QAAQ,CAAA;AACrC,OAAO,EAAE,eAAe,EAAE,MAAM,WAAW,CAAA;AAC3C,OAAO,EACL,uBAAuB,EACvB,KAAK,uBAAuB,EAC5B,KAAK,oBAAoB,EACzB,sBAAsB,EACtB,eAAe,EACf,oBAAoB,GACrB,MAAM,WAAW,CAAA"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../../src/artifacts/publish/index.ts"],"names":[],"mappings":"AAAA,mGAAmG;AAEnG,OAAO,EAAE,kBAAkB,EAAE,oBAAoB,EAAE,MAAM,cAAc,CAAA;AACvE,OAAO,EAAE,YAAY,EAAE,MAAM,QAAQ,CAAA;AACrC,OAAO,EAAE,eAAe,EAAE,MAAM,WAAW,CAAA;AAC3C,OAAO,EAAE,iBAAiB,EAAE,MAAM,YAAY,CAAA;AAC9C,OAAO,EACL,uBAAuB,EACvB,KAAK,uBAAuB,EAC5B,KAAK,oBAAoB,EACzB,sBAAsB,EACtB,eAAe,EACf,oBAAoB,GACrB,MAAM,WAAW,CAAA"}

package/dist/artifacts/publish/index.js

@@ -1,31 +1,71 @@
 // @bun
+import"../../chunk-h3pbv7n8.js";
+import"../../chunk-vhbw5sqm.js";
+import"../../chunk-zbc929zg.js";
+import"../../chunk-6eqsgvxk.js";
+import"../../chunk-yc9ners4.js";
+import"../../chunk-4y26vs3v.js";
+import"../../chunk-rap5w0x0.js";
+import"../../chunk-wkv3h3q7.js";
+import"../../chunk-65pyhyas.js";
+import"../../chunk-73v685wb.js";
+import"../../chunk-bab05bhg.js";
+import"../../chunk-cdk3egjj.js";
+import"../../chunk-zrvhsq7f.js";
+import"../../chunk-5grk14e5.js";
 import {
-  isArtifactId2,
   ARTIFACT_LIMITS2
-} from "../../chunk-mjddfa7k.js";
-import"../../chunk-7q8t23v4.js";
-import"../../chunk-wkv3h3q7.js";
-import"../../chunk-nn5xnx3s.js";
-import"../../chunk-dhdha526.js";
-import"../../chunk-dvd2fp9q.js";
-import"../../chunk-6eqsgvxk.js";
-import"../../chunk-6vb4st8k.js";
-import"../../chunk-v4jbb3rs.js";
-import"../../chunk-8frc8a4j.js";
-import"../../chunk-f4pamkt9.js";
-import"../../chunk-s7jg7pmn.js";
-import"../../chunk-hcbyfxbe.js";
-import"../../chunk-48qjhh6v.js";
+} from "../../chunk-hz5d43gn.js";
+import {
+  isArtifactId2
+} from "../../chunk-3fqxbn31.js";
+import {
+  artifactQueryName2
+} from "../../chunk-waqk73p1.js";
+import"../../chunk-x0v3jd47.js";
+import"../../chunk-6rrtzea3.js";
+import"../../chunk-mbsbxarb.js";
+import"../../chunk-c0vk1djt.js";
+import"../../chunk-pdt5cw8z.js";
+import"../../chunk-tdxfsg1c.js";
+import"../../chunk-nydf3dbe.js";
+import"../../chunk-0xmt5p5y.js";
+import"../../chunk-4ymrcdbm.js";
+import"../../chunk-h89wz928.js";
+import"../../chunk-hwarjrgf.js";
+import"../../chunk-fe8zwt8b.js";
+import"../../chunk-gfdh9kqa.js";
+import"../../chunk-cwdzcv37.js";
+import"../../chunk-eptrvnby.js";
+import"../../chunk-cswhawa2.js";
+import"../../chunk-ezne9wc9.js";
+import"../../chunk-hqsp2sx4.js";
+import"../../chunk-2adz0h75.js";
+import"../../chunk-mmagke4x.js";
+import"../../chunk-hn2r7z41.js";
+import"../../chunk-g663fahq.js";
+import"../../chunk-jmfet9r4.js";
+import"../../chunk-qf954wje.js";
+import"../../chunk-efmm01gj.js";
+import"../../chunk-7z5p905k.js";
+import"../../chunk-qx00vjrj.js";
 import {
   publishArtifact2,
   prepareArtifactVersion2,
   storeArtifactVersion2,
-  artifactVersionWarnings2
-} from "../../chunk-9kgkfg6v.js";
-import"../../chunk-447a5c0p.js";
+  artifactVersionWarnings2,
+  artifactAccessRule2,
+  artifactQueryChecker2
+} from "../../chunk-qhqgp4jf.js";
+import"../../chunk-fm62y49k.js";
+import"../../chunk-pgrf64hp.js";
+import"../../chunk-6n69k945.js";
 import"../../chunk-a3faa34j.js";
 export {
   ARTIFACT_LIMITS2 as ARTIFACT_LIMITS,
+  artifactAccessRule2 as artifactAccessRule,
+  artifactQueryChecker2 as artifactQueryChecker,
+  artifactQueryName2 as artifactQueryName,
   artifactVersionWarnings2 as artifactVersionWarnings,
   isArtifactId2 as isArtifactId,
   prepareArtifactVersion2 as prepareArtifactVersion,
@@ -33,4 +73,4 @@ export {
   storeArtifactVersion2 as storeArtifactVersion
 };
 
-//# debugId=E074876D2B70C49764756E2164756E21
+//# debugId=F3980B58FEDAC92E64756E2164756E21

package/dist/artifacts/publish/index.js.map

@@ -4,6 +4,6 @@
   "sourcesContent": [
   ],
   "mappings": "",
-  "debugId": "E074876D2B70C49764756E2164756E21",
+  "debugId": "F3980B58FEDAC92E64756E2164756E21",
   "names": []
 }

package/dist/artifacts/publish/publish.d.ts

@@ -1,8 +1,10 @@
 import type { Principal } from "../../auth";
 import type { ArtifactFile, ArtifactOrigin, ArtifactRecord, ArtifactStorage, ArtifactVersionInput, ArtifactVersionRecord, PublishedArtifactVersion } from "../../storage/artifacts/types";
+import { type ArtifactAccess } from "../access";
 import type { ArtifactKind } from "../kinds";
 import type { ArtifactWarning } from "../warnings";
 import { type ArtifactBlobStorage } from "./files";
+import { type ArtifactQueryChecker } from "./queries";
 export interface PublishArtifactContext {
     readonly projectId: string;
     readonly storage: ArtifactStorage;
@@ -14,10 +16,30 @@ export interface PublishArtifactInput {
     readonly kind: ArtifactKind;
     readonly title: string;
     readonly files: readonly ArtifactFile[];
-    /** Publishes the version, and owns the artifact when this creates it. */
+    /** Publishes the version, and owns the artifact when this creates it unless `owner` says. */
     readonly author: Principal;
+    /** Owns the artifact when this creates it: a conversation's owner, for an Agent turn in it. */
+    readonly owner?: Principal;
+    /**
+     * Whether an address in the version may name this artifact: one the author can read. Defaults to
+     * the author's own artifacts.
+     */
+    readonly readable?: (artifact: ArtifactRecord) => Promise<boolean>;
+    /**
+     * Checks each of the version's queries as the author, so none reads what they cannot. Without
+     * it, a version that holds a query is refused.
+     */
+    readonly checkQuery?: ArtifactQueryChecker;
     readonly origin?: ArtifactOrigin;
+    /** The version this one was made from: publishing fails with `artifact_moved` past it. */
+    readonly baseVersion?: number;
 }
+/**
+ * What the author may do with the artifact a version is published to, as the access rule's
+ * `publishAccess` answers it from where the version is stored: a transaction's storage, for a
+ * caller that stores in one. Storing refuses `none` with `not_shared` and `read` with `read_only`.
+ */
+export type PublishAccess = (artifact: ArtifactRecord) => Promise<ArtifactAccess>;
 export interface PublishedArtifact {
     readonly artifact: ArtifactRecord;
     readonly version: ArtifactVersionRecord;
@@ -26,27 +48,37 @@ export interface PublishedArtifact {
 /** A version checked against its kind and with its addresses resolved, ready to store. */
 export interface PreparedArtifactVersion {
     readonly artifactId?: string;
+    readonly baseVersion?: number;
     readonly kind: ArtifactKind;
-    readonly author: Principal;
+    /** Owns the artifact when this version creates it. */
+    readonly owner: Principal;
+    readonly readable: (artifact: ArtifactRecord) => Promise<boolean>;
     readonly version: ArtifactVersionInput;
+    /** What its kind's check found worth fixing in a version it accepts. */
+    readonly warnings: readonly ArtifactWarning[];
 }
 /**
  * Validates a version against its kind and stores it. Who may publish is the caller's decision:
  * this checks only what the version holds.
  */
-export declare function publishArtifact(context: PublishArtifactContext, input: PublishArtifactInput): Promise<PublishedArtifact>;
+export declare function publishArtifact(context: PublishArtifactContext, input: PublishArtifactInput, access: PublishAccess): Promise<PublishedArtifact>;
 /**
- * Everything publishing checks before it stores: the title, the files, the theme, the kind's own
- * format, and every address, resolved against what the author can read. It reads the files back
- * and parses them, so a caller that stores inside a transaction prepares outside it.
+ * Everything publishing checks before it stores: the title, the files, the theme, every query, run
+ * once as the author, the kind's own format, and every address, resolved against what the author
+ * can read. It reads the files back and parses them, so a caller that stores inside a
+ * transaction prepares outside it.
  */
 export declare function prepareArtifactVersion(context: PublishArtifactContext, input: PublishArtifactInput): Promise<PreparedArtifactVersion>;
-/** Stores a prepared version: the next one of its artifact, or the first of a new one. */
-export declare function storeArtifactVersion(context: PublishArtifactContext, prepared: PreparedArtifactVersion): Promise<PublishedArtifactVersion>;
 /**
- * What a stored version breaks in other artifacts that show it. A first version breaks nothing:
- * no other artifact could name it yet. The version is stored by now, so a failed check only loses
- * the warnings.
+ * Stores a prepared version: the next one of its artifact, or the first of a new one. The next
+ * version is refused unless `access` says its author may update the artifact: a caller that stores
+ * inside a transaction answers it from there, so the check and the write see the same artifact.
+ */
+export declare function storeArtifactVersion(context: PublishArtifactContext, prepared: PreparedArtifactVersion, access: PublishAccess): Promise<PublishedArtifactVersion>;
+/**
+ * What is worth fixing in a stored version: what its kind's check found, then what it breaks in
+ * other artifacts that show it. A first version breaks nothing: no other artifact could name it
+ * yet. The version is stored by now, so a failed check only loses those warnings.
  */
 export declare function artifactVersionWarnings(context: PublishArtifactContext, prepared: PreparedArtifactVersion, stored: PublishedArtifactVersion): Promise<readonly ArtifactWarning[]>;
 //# sourceMappingURL=publish.d.ts.map

package/dist/artifacts/publish/publish.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"publish.d.ts","sourceRoot":"","sources":["../../../src/artifacts/publish/publish.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,YAAY,CAAA;AAE3C,OAAO,KAAK,EACV,YAAY,EACZ,cAAc,EACd,cAAc,EACd,eAAe,EACf,oBAAoB,EACpB,qBAAqB,EACrB,wBAAwB,EACzB,MAAM,+BAA+B,CAAA;AAGtC,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,UAAU,CAAA;AAI5C,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,aAAa,CAAA;AAClD,OAAO,EACL,KAAK,mBAAmB,EAIzB,MAAM,SAAS,CAAA;AAOhB,MAAM,WAAW,sBAAsB;IACrC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;IAC1B,QAAQ,CAAC,OAAO,EAAE,eAAe,CAAA;IACjC,QAAQ,CAAC,WAAW,EAAE,mBAAmB,CAAA;CAC1C;AAED,MAAM,WAAW,oBAAoB;IACnC,0FAA0F;IAC1F,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAA;IAC5B,QAAQ,CAAC,IAAI,EAAE,YAAY,CAAA;IAC3B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;IACtB,QAAQ,CAAC,KAAK,EAAE,SAAS,YAAY,EAAE,CAAA;IACvC,yEAAyE;IACzE,QAAQ,CAAC,MAAM,EAAE,SAAS,CAAA;IAC1B,QAAQ,CAAC,MAAM,CAAC,EAAE,cAAc,CAAA;CACjC;AAED,MAAM,WAAW,iBAAiB;IAChC,QAAQ,CAAC,QAAQ,EAAE,cAAc,CAAA;IACjC,QAAQ,CAAC,OAAO,EAAE,qBAAqB,CAAA;IACvC,QAAQ,CAAC,QAAQ,EAAE,SAAS,eAAe,EAAE,CAAA;CAC9C;AAID,0FAA0F;AAC1F,MAAM,WAAW,uBAAuB;IACtC,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAA;IAC5B,QAAQ,CAAC,IAAI,EAAE,YAAY,CAAA;IAC3B,QAAQ,CAAC,MAAM,EAAE,SAAS,CAAA;IAC1B,QAAQ,CAAC,OAAO,EAAE,oBAAoB,CAAA;CACvC;AAED;;;GAGG;AACH,wBAAsB,eAAe,CACnC,OAAO,EAAE,sBAAsB,EAC/B,KAAK,EAAE,oBAAoB,GAC1B,OAAO,CAAC,iBAAiB,CAAC,CAI5B;AAED;;;;GAIG;AACH,wBAAsB,sBAAsB,CAC1C,OAAO,EAAE,sBAAsB,EAC/B,KAAK,EAAE,oBAAoB,GAC1B,OAAO,CAAC,uBAAuB,CAAC,CAwBlC;AAED,0FAA0F;AAC1F,wBAAsB,oBAAoB,CACxC,OAAO,EAAE,sBAAsB,EAC/B,QAAQ,EAAE,uBAAuB,GAChC,OAAO,CAAC,wBAAwB,CAAC,CAInC;AAED;;;;GAIG;AACH,wBAAsB,uBAAuB,CAC3C,OAAO,EAAE,sBAAsB,EAC/B,QAAQ,EAAE,uBAAuB,EACjC,MAAM,EAAE,wBAAwB,GAC/B,OAAO,CAAC,SAAS,eAAe,EAAE,CAAC,CAerC"}
+{"version":3,"file":"publish.d.ts","sourceRoot":"","sources":["../../../src/artifacts/publish/publish.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,YAAY,CAAA;AAE3C,OAAO,KAAK,EACV,YAAY,EACZ,cAAc,EACd,cAAc,EACd,eAAe,EACf,oBAAoB,EACpB,qBAAqB,EACrB,wBAAwB,EACzB,MAAM,+BAA+B,CAAA;AACtC,OAAO,EAAE,KAAK,cAAc,EAAmB,MAAM,WAAW,CAAA;AAGhE,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,UAAU,CAAA;AAK5C,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,aAAa,CAAA;AAClD,OAAO,EACL,KAAK,mBAAmB,EAIzB,MAAM,SAAS,CAAA;AAChB,OAAO,EAAE,KAAK,oBAAoB,EAAwB,MAAM,WAAW,CAAA;AAc3E,MAAM,WAAW,sBAAsB;IACrC,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;IAC1B,QAAQ,CAAC,OAAO,EAAE,eAAe,CAAA;IACjC,QAAQ,CAAC,WAAW,EAAE,mBAAmB,CAAA;CAC1C;AAED,MAAM,WAAW,oBAAoB;IACnC,0FAA0F;IAC1F,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAA;IAC5B,QAAQ,CAAC,IAAI,EAAE,YAAY,CAAA;IAC3B,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;IACtB,QAAQ,CAAC,KAAK,EAAE,SAAS,YAAY,EAAE,CAAA;IACvC,6FAA6F;IAC7F,QAAQ,CAAC,MAAM,EAAE,SAAS,CAAA;IAC1B,+FAA+F;IAC/F,QAAQ,CAAC,KAAK,CAAC,EAAE,SAAS,CAAA;IAC1B;;;OAGG;IACH,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC,QAAQ,EAAE,cAAc,KAAK,OAAO,CAAC,OAAO,CAAC,CAAA;IAClE;;;OAGG;IACH,QAAQ,CAAC,UAAU,CAAC,EAAE,oBAAoB,CAAA;IAC1C,QAAQ,CAAC,MAAM,CAAC,EAAE,cAAc,CAAA;IAChC,0FAA0F;IAC1F,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAA;CAC9B;AAED;;;;GAIG;AACH,MAAM,MAAM,aAAa,GAAG,CAAC,QAAQ,EAAE,cAAc,KAAK,OAAO,CAAC,cAAc,CAAC,CAAA;AAEjF,MAAM,WAAW,iBAAiB;IAChC,QAAQ,CAAC,QAAQ,EAAE,cAAc,CAAA;IACjC,QAAQ,CAAC,OAAO,EAAE,qBAAqB,CAAA;IACvC,QAAQ,CAAC,QAAQ,EAAE,SAAS,eAAe,EAAE,CAAA;CAC9C;AAID,0FAA0F;AAC1F,MAAM,WAAW,uBAAuB;IACtC,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAA;IAC5B,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,CAAA;IAC7B,QAAQ,CAAC,IAAI,EAAE,YAAY,CAAA;IAC3B,sDAAsD;IACtD,QAAQ,CAAC,KAAK,EAAE,SAAS,CAAA;IACzB,QAAQ,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE,cAAc,KAAK,OAAO,CAAC,OAAO,CAAC,CAAA;IACjE,QAAQ,CAAC,OAAO,EAAE,oBAAoB,CAAA;IACtC,wEAAwE;IACxE,QAAQ,CAAC,QAAQ,EAAE,SAAS,eAAe,EAAE,CAAA;CAC9C;AAED;;;GAGG;AACH,wBAAsB,eAAe,CACnC,OAAO,EAAE,sBAAsB,EAC/B,KAAK,EAAE,oBAAoB,EAC3B,MAAM,EAAE,aAAa,GACpB,OAAO,CAAC,iBAAiB,CAAC,CAI5B;AAED;;;;;GAKG;AACH,wBAAsB,sBAAsB,CAC1C,OAAO,EAAE,sBAAsB,EAC/B,KAAK,EAAE,oBAAoB,GAC1B,OAAO,CAAC,uBAAuB,CAAC,CAsClC;AAED;;;;GAIG;AACH,wBAAsB,oBAAoB,CACxC,OAAO,EAAE,sBAAsB,EAC/B,QAAQ,EAAE,uBAAuB,EACjC,MAAM,EAAE,aAAa,GACpB,OAAO,CAAC,wBAAwB,CAAC,CAWnC;AAED;;;;GAIG;AACH,wBAAsB,uBAAuB,CAC3C,OAAO,EAAE,sBAAsB,EAC/B,QAAQ,EAAE,uBAAuB,EACjC,MAAM,EAAE,wBAAwB,GAC/B,OAAO,CAAC,SAAS,eAAe,EAAE,CAAC,CAkBrC"}

package/dist/artifacts/publish/queries.d.ts

@@ -0,0 +1,33 @@
+import type { SixbRuntimeContext } from "../../runtime/types";
+import type { ArtifactFile } from "../../storage/artifacts/types";
+import type { ArtifactKind } from "../kinds";
+import { type ArtifactQuery, type CheckedArtifactQuery } from "../queries";
+import { type ArtifactBlobStorage } from "./files";
+/**
+ * Admits a query as the version's author: it throws what running it as them would throw, and
+ * refuses one that would return what they cannot read; it returns what the query returns and what
+ * its rows hold as they see them. A version is refused when its author could not run one of its
+ * queries, so a query never reads what whoever wrote it cannot. Each reader still runs it with
+ * their own rights.
+ */
+export type ArtifactQueryChecker = (query: ArtifactQuery) => Promise<CheckedArtifactQuery>;
+/**
+ * The checker for the runtime's caller. Running the query once, as cheaply as its kind allows,
+ * is the check: validation against the ontology, `can.view` on every type it reads, clearance for
+ * every marked property it filters, sorts or facets on, and the caller's share scope all apply
+ * there, as they do when it is read.
+ *
+ * What the rows carry is checked after: a read leaves out a marked property its reader is not
+ * cleared for, and the member profiles of a reader who may not view them, so running the query
+ * admits one that returns them. A reader's rows reach the page's code, which its author wrote, so
+ * the query may return only what the author can read. Facets return counts, never a property.
+ */
+export declare function createArtifactQueryChecker(runtime: Pick<SixbRuntimeContext, "objectReader" | "ontology" | "projectId" | "runtimeAuthorization" | "authorization">): ArtifactQueryChecker;
+/**
+ * Checks the `queries/` files of a version: their names and number, their shape, then each one as
+ * its author through `checker`, and returns what each check learned by query name, for the kind's
+ * own check. Fails closed: a version that holds a query is refused without one. A file artifact is
+ * delivered as it is, so its one file is never read as a query.
+ */
+export declare function checkArtifactQueries(blobStorage: ArtifactBlobStorage, kind: ArtifactKind, files: readonly ArtifactFile[], checker: ArtifactQueryChecker | undefined): Promise<ReadonlyMap<string, CheckedArtifactQuery>>;
+//# sourceMappingURL=queries.d.ts.map

package/dist/artifacts/publish/queries.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"queries.d.ts","sourceRoot":"","sources":["../../../src/artifacts/publish/queries.ts"],"names":[],"mappings":"AAgBA,OAAO,KAAK,EAAE,kBAAkB,EAAE,MAAM,qBAAqB,CAAA;AAC7D,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,+BAA+B,CAAA;AACjE,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,UAAU,CAAA;AAE5C,OAAO,EAGL,KAAK,aAAa,EAElB,KAAK,oBAAoB,EAE1B,MAAM,YAAY,CAAA;AAEnB,OAAO,EAAE,KAAK,mBAAmB,EAAqC,MAAM,SAAS,CAAA;AAErF;;;;;;GAMG;AACH,MAAM,MAAM,oBAAoB,GAAG,CAAC,KAAK,EAAE,aAAa,KAAK,OAAO,CAAC,oBAAoB,CAAC,CAAA;AAE1F;;;;;;;;;;GAUG;AACH,wBAAgB,0BAA0B,CACxC,OAAO,EAAE,IAAI,CACX,kBAAkB,EAClB,cAAc,GAAG,UAAU,GAAG,WAAW,GAAG,sBAAsB,GAAG,eAAe,CACrF,GACA,oBAAoB,CAmBtB;AAyKD;;;;;GAKG;AACH,wBAAsB,oBAAoB,CACxC,WAAW,EAAE,mBAAmB,EAChC,IAAI,EAAE,YAAY,EAClB,KAAK,EAAE,SAAS,YAAY,EAAE,EAC9B,OAAO,EAAE,oBAAoB,GAAG,SAAS,GACxC,OAAO,CAAC,WAAW,CAAC,MAAM,EAAE,oBAAoB,CAAC,CAAC,CA+CpD"}

package/dist/artifacts/publish/references.d.ts

@@ -7,8 +7,8 @@ export type FoundReference = Omit<ArtifactReference, "resolvedVersion">;
 interface ReferenceContext {
     readonly projectId: string;
     readonly storage: ArtifactStorage;
-    /** Who publishes: an address resolves only to artifacts they can read. */
-    readonly author: Principal;
+    /** Whether an address may name this artifact: one whoever publishes can read. */
+    readonly readable: (artifact: ArtifactRecord) => Promise<boolean>;
     /** The artifact being published, which an address may not name. */
     readonly artifactId?: string;
 }
@@ -20,8 +20,11 @@ interface ReferenceContext {
 export declare function resolveReferences(context: ReferenceContext, found: readonly FoundReference[]): Promise<ArtifactReference[]>;
 /**
  * The artifacts a new version breaks: each one whose latest version follows this artifact's latest
- * and names something this version no longer has. Only artifacts the author can read are named.
+ * and names something this version no longer has. Only artifacts the author can read are named,
+ * and only those the version breaks are checked: most dependents cost no read.
  */
 export declare function brokenDependents(context: ReferenceContext, artifact: ArtifactRecord, version: ArtifactVersionRecord): Promise<ArtifactWarning[]>;
+/** What its author reads when nothing else is said: their own artifacts, or all for system code. */
+export declare function ownArtifacts(author: Principal): (artifact: ArtifactRecord) => Promise<boolean>;
 export {};
 //# sourceMappingURL=references.d.ts.map

package/dist/artifacts/publish/references.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"references.d.ts","sourceRoot":"","sources":["../../../src/artifacts/publish/references.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,SAAS,EAAmB,MAAM,YAAY,CAAA;AAC5D,OAAO,KAAK,EACV,cAAc,EACd,eAAe,EACf,qBAAqB,EACtB,MAAM,+BAA+B,CAAA;AAGtC,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,eAAe,CAAA;AAEtD,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,aAAa,CAAA;AAGlD,wEAAwE;AACxE,MAAM,MAAM,cAAc,GAAG,IAAI,CAAC,iBAAiB,EAAE,iBAAiB,CAAC,CAAA;AAEvE,UAAU,gBAAgB;IACxB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;IAC1B,QAAQ,CAAC,OAAO,EAAE,eAAe,CAAA;IACjC,0EAA0E;IAC1E,QAAQ,CAAC,MAAM,EAAE,SAAS,CAAA;IAC1B,mEAAmE;IACnE,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAA;CAC7B;AAED;;;;GAIG;AACH,wBAAsB,iBAAiB,CACrC,OAAO,EAAE,gBAAgB,EACzB,KAAK,EAAE,SAAS,cAAc,EAAE,GAC/B,OAAO,CAAC,iBAAiB,EAAE,CAAC,CAuD9B;AAED;;;GAGG;AACH,wBAAsB,gBAAgB,CACpC,OAAO,EAAE,gBAAgB,EACzB,QAAQ,EAAE,cAAc,EACxB,OAAO,EAAE,qBAAqB,GAC7B,OAAO,CAAC,eAAe,EAAE,CAAC,CA0B5B"}
+{"version":3,"file":"references.d.ts","sourceRoot":"","sources":["../../../src/artifacts/publish/references.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,KAAK,SAAS,EAAmB,MAAM,YAAY,CAAA;AAC5D,OAAO,KAAK,EACV,cAAc,EACd,eAAe,EACf,qBAAqB,EACtB,MAAM,+BAA+B,CAAA;AAGtC,OAAO,KAAK,EAAE,iBAAiB,EAAE,MAAM,eAAe,CAAA;AAEtD,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,aAAa,CAAA;AAGlD,wEAAwE;AACxE,MAAM,MAAM,cAAc,GAAG,IAAI,CAAC,iBAAiB,EAAE,iBAAiB,CAAC,CAAA;AAEvE,UAAU,gBAAgB;IACxB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAA;IAC1B,QAAQ,CAAC,OAAO,EAAE,eAAe,CAAA;IACjC,iFAAiF;IACjF,QAAQ,CAAC,QAAQ,EAAE,CAAC,QAAQ,EAAE,cAAc,KAAK,OAAO,CAAC,OAAO,CAAC,CAAA;IACjE,mEAAmE;IACnE,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAA;CAC7B;AAED;;;;GAIG;AACH,wBAAsB,iBAAiB,CACrC,OAAO,EAAE,gBAAgB,EACzB,KAAK,EAAE,SAAS,cAAc,EAAE,GAC/B,OAAO,CAAC,iBAAiB,EAAE,CAAC,CAuD9B;AAED;;;;GAIG;AACH,wBAAsB,gBAAgB,CACpC,OAAO,EAAE,gBAAgB,EACzB,QAAQ,EAAE,cAAc,EACxB,OAAO,EAAE,qBAAqB,GAC7B,OAAO,CAAC,eAAe,EAAE,CAAC,CA8B5B;AAED,oGAAoG;AACpG,wBAAgB,YAAY,CAAC,MAAM,EAAE,SAAS,GAAG,CAAC,QAAQ,EAAE,cAAc,KAAK,OAAO,CAAC,OAAO,CAAC,CAE9F"}

package/dist/artifacts/publish/validate/canvas.d.ts

@@ -0,0 +1,18 @@
+import type { ArtifactFile } from "../../../storage/artifacts/types";
+import type { CanvasOutline } from "../../outline";
+import type { ArtifactWarning } from "../../warnings";
+import { type ArtifactBlobStorage } from "../files";
+import type { FoundReference } from "../references";
+/**
+ * Reads a canvas: `canvas.json`, then each board's HTML, which must be one of the version's files.
+ * The addresses its embeds show and its boards use are returned to resolve, each at its item's id.
+ * Boards that overlap, and notes or text drawn over a board, are warnings: the reader sees a page
+ * covered.
+ */
+export declare function validateCanvas(blobStorage: ArtifactBlobStorage, files: readonly ArtifactFile[]): Promise<{
+    readonly entry: string;
+    readonly outline: CanvasOutline;
+    readonly references: readonly FoundReference[];
+    readonly warnings: readonly ArtifactWarning[];
+}>;
+//# sourceMappingURL=canvas.d.ts.map

package/dist/artifacts/publish/validate/canvas.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"canvas.d.ts","sourceRoot":"","sources":["../../../../src/artifacts/publish/validate/canvas.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,kCAAkC,CAAA;AAGpE,OAAO,KAAK,EAAE,aAAa,EAAqB,MAAM,eAAe,CAAA;AACrE,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,gBAAgB,CAAA;AACrD,OAAO,EAAE,KAAK,mBAAmB,EAAqC,MAAM,UAAU,CAAA;AACtF,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,eAAe,CAAA;AAGnD;;;;;GAKG;AACH,wBAAsB,cAAc,CAClC,WAAW,EAAE,mBAAmB,EAChC,KAAK,EAAE,SAAS,YAAY,EAAE,GAC7B,OAAO,CAAC;IACT,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;IACtB,QAAQ,CAAC,OAAO,EAAE,aAAa,CAAA;IAC/B,QAAQ,CAAC,UAAU,EAAE,SAAS,cAAc,EAAE,CAAA;IAC9C,QAAQ,CAAC,QAAQ,EAAE,SAAS,eAAe,EAAE,CAAA;CAC9C,CAAC,CAmDD"}

package/dist/artifacts/publish/validate/html.d.ts

@@ -0,0 +1,20 @@
+import type { ArtifactFile } from "../../../storage/artifacts/types";
+import type { FoundReference } from "../references";
+/** The file a web artifact, a deck or a page, renders from. */
+export declare const HTML_ENTRY = "index.html";
+/** Where the frame serves the kit and the runtime, beside a web artifact's own files. */
+export declare const FRAME_ASSET_PREFIX = "__sixb/";
+/** Refuses a file under `__sixb/`, where the frame serves its own: it would never be served. */
+export declare function refuseFrameAssetPaths(files: readonly ArtifactFile[], what: string): void;
+/**
+ * Reads the `artifact:` addresses a web artifact's HTML uses, to resolve: links (`<a href>`),
+ * files it shows from other artifacts (`<img src>`), and anything else it shows (`<sixb-embed
+ * src>`), a chart, a range, a section, or a slide, which the app draws over the frame. `at` names
+ * where each sits, such as a deck's slide, and `file` the HTML file it reads. The first thing that
+ * would not render is the refusal.
+ */
+export declare function readHtmlReferences(rewriter: HTMLRewriter, at: () => string, file?: string): {
+    readonly references: FoundReference[];
+    readonly refusal: () => string | undefined;
+};
+//# sourceMappingURL=html.d.ts.map

package/dist/artifacts/publish/validate/html.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"html.d.ts","sourceRoot":"","sources":["../../../../src/artifacts/publish/validate/html.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,kCAAkC,CAAA;AAIpE,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,eAAe,CAAA;AAEnD,+DAA+D;AAC/D,eAAO,MAAM,UAAU,eAAe,CAAA;AAEtC,yFAAyF;AACzF,eAAO,MAAM,kBAAkB,YAAY,CAAA;AAE3C,gGAAgG;AAChG,wBAAgB,qBAAqB,CAAC,KAAK,EAAE,SAAS,YAAY,EAAE,EAAE,IAAI,EAAE,MAAM,GAAG,IAAI,CAOxF;AAED;;;;;;GAMG;AACH,wBAAgB,kBAAkB,CAChC,QAAQ,EAAE,YAAY,EACtB,EAAE,EAAE,MAAM,MAAM,EAChB,IAAI,GAAE,MAAmB,GACxB;IAAE,QAAQ,CAAC,UAAU,EAAE,cAAc,EAAE,CAAC;IAAC,QAAQ,CAAC,OAAO,EAAE,MAAM,MAAM,GAAG,SAAS,CAAA;CAAE,CA4CvF"}

package/dist/artifacts/publish/validate/page.d.ts

@@ -0,0 +1,15 @@
+import type { ArtifactFile } from "../../../storage/artifacts/types";
+import type { PageOutline } from "../../outline";
+import { type ArtifactBlobStorage } from "../files";
+import type { FoundReference } from "../references";
+/**
+ * Reads a page: `index.html` and the files it loads beside it, its scripts, styles, images, and
+ * data. Its `<title>`, else its first `<h1>`, becomes its title in the outline. The `artifact:`
+ * addresses it uses are returned to resolve, as a deck's are.
+ */
+export declare function validatePage(blobStorage: ArtifactBlobStorage, files: readonly ArtifactFile[]): Promise<{
+    readonly entry: string;
+    readonly outline: PageOutline;
+    readonly references: readonly FoundReference[];
+}>;
+//# sourceMappingURL=page.d.ts.map

package/dist/artifacts/publish/validate/page.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"page.d.ts","sourceRoot":"","sources":["../../../../src/artifacts/publish/validate/page.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,kCAAkC,CAAA;AAGpE,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,eAAe,CAAA;AAChD,OAAO,EAAE,KAAK,mBAAmB,EAAqC,MAAM,UAAU,CAAA;AACtF,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,eAAe,CAAA;AAGnD;;;;GAIG;AACH,wBAAsB,YAAY,CAChC,WAAW,EAAE,mBAAmB,EAChC,KAAK,EAAE,SAAS,YAAY,EAAE,GAC7B,OAAO,CAAC;IACT,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;IACtB,QAAQ,CAAC,OAAO,EAAE,WAAW,CAAA;IAC7B,QAAQ,CAAC,UAAU,EAAE,SAAS,cAAc,EAAE,CAAA;CAC/C,CAAC,CA4CD"}

package/dist/artifacts/publish/validate/sheet.d.ts

@@ -1,15 +1,23 @@
 import type { ArtifactFile } from "../../../storage/artifacts/types";
 import type { SheetOutline } from "../../outline";
+import { type CheckedArtifactQuery } from "../../queries";
+import type { ArtifactWarning } from "../../warnings";
 import { type ArtifactBlobStorage } from "../files";
 import type { FoundReference } from "../references";
 /**
  * Reads a sheet: `workbook.json`, then each sheet's CSV against it. Every cell of a typed column
- * must read as its type and every chart must name columns its sheet has, so the grid formats and
- * the charts draw the same wherever the sheet is opened.
+ * must read as its type, every formula must compute its column, and every chart must name columns
+ * its sheet has, so the grid formats and the charts draw the same wherever the sheet is opened.
+ * Rows a formula computes to an error are warnings: the version publishes, and the grid shows them.
+ *
+ * A live sheet is checked against `queries`, what checking the version's queries as its author
+ * learned: its query returns rows, and its columns show properties those rows hold, so its rules
+ * hold as a CSV sheet's do. Its rows are each reader's, so no cell is checked.
  */
-export declare function validateSheet(blobStorage: ArtifactBlobStorage, files: readonly ArtifactFile[]): Promise<{
+export declare function validateSheet(blobStorage: ArtifactBlobStorage, files: readonly ArtifactFile[], queries: ReadonlyMap<string, CheckedArtifactQuery>): Promise<{
     readonly entry: string;
     readonly outline: SheetOutline;
     readonly references: readonly FoundReference[];
+    readonly warnings: readonly ArtifactWarning[];
 }>;
 //# sourceMappingURL=sheet.d.ts.map

package/dist/artifacts/publish/validate/sheet.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"sheet.d.ts","sourceRoot":"","sources":["../../../../src/artifacts/publish/validate/sheet.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,kCAAkC,CAAA;AAIpE,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,eAAe,CAAA;AAYjD,OAAO,EAAE,KAAK,mBAAmB,EAAqC,MAAM,UAAU,CAAA;AACtF,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,eAAe,CAAA;AAEnD;;;;GAIG;AACH,wBAAsB,aAAa,CACjC,WAAW,EAAE,mBAAmB,EAChC,KAAK,EAAE,SAAS,YAAY,EAAE,GAC7B,OAAO,CAAC;IACT,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;IACtB,QAAQ,CAAC,OAAO,EAAE,YAAY,CAAA;IAC9B,QAAQ,CAAC,UAAU,EAAE,SAAS,cAAc,EAAE,CAAA;CAC/C,CAAC,CA6CD"}
+{"version":3,"file":"sheet.d.ts","sourceRoot":"","sources":["../../../../src/artifacts/publish/validate/sheet.ts"],"names":[],"mappings":"AACA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,kCAAkC,CAAA;AAMpE,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,eAAe,CAAA;AACjD,OAAO,EAAqB,KAAK,oBAAoB,EAAE,MAAM,eAAe,CAAA;AAE5E,OAAO,KAAK,EAAE,eAAe,EAAE,MAAM,gBAAgB,CAAA;AAWrD,OAAO,EAAE,KAAK,mBAAmB,EAAqC,MAAM,UAAU,CAAA;AACtF,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,eAAe,CAAA;AAEnD;;;;;;;;;GASG;AACH,wBAAsB,aAAa,CACjC,WAAW,EAAE,mBAAmB,EAChC,KAAK,EAAE,SAAS,YAAY,EAAE,EAC9B,OAAO,EAAE,WAAW,CAAC,MAAM,EAAE,oBAAoB,CAAC,GACjD,OAAO,CAAC;IACT,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;IACtB,QAAQ,CAAC,OAAO,EAAE,YAAY,CAAA;IAC9B,QAAQ,CAAC,UAAU,EAAE,SAAS,cAAc,EAAE,CAAA;IAC9C,QAAQ,CAAC,QAAQ,EAAE,SAAS,eAAe,EAAE,CAAA;CAC9C,CAAC,CA+DD"}

package/dist/artifacts/publish/validate/slides.d.ts

@@ -2,16 +2,10 @@ import type { ArtifactFile } from "../../../storage/artifacts/types";
 import type { SlidesOutline } from "../../outline";
 import { type ArtifactBlobStorage } from "../files";
 import type { FoundReference } from "../references";
-/** The file a deck renders from. */
-export declare const SLIDES_ENTRY = "index.html";
-/** Where the frame serves the kit and the runtime, beside a deck's own files. */
-export declare const FRAME_ASSET_PREFIX = "__sixb/";
 /**
  * Reads a deck: `index.html` with one `<section class="slide">` per 1280×720 slide, and the files
  * it loads beside it. Each slide's first heading becomes its title in the outline. The `artifact:`
- * addresses it uses are returned with the slide each is on, to resolve: links (`<a href>`), files
- * it shows from other artifacts (`<img src>`), and anything else it shows (`<sixb-embed src>`), a
- * chart, a range, a section, or a slide, which the app draws over the frame.
+ * addresses it uses are returned with the slide each is on, to resolve.
  */
 export declare function validateSlides(blobStorage: ArtifactBlobStorage, files: readonly ArtifactFile[]): Promise<{
     readonly entry: string;

package/dist/artifacts/publish/validate/slides.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"slides.d.ts","sourceRoot":"","sources":["../../../../src/artifacts/publish/validate/slides.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,kCAAkC,CAAA;AAIpE,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,eAAe,CAAA;AAClD,OAAO,EAAE,KAAK,mBAAmB,EAAqC,MAAM,UAAU,CAAA;AACtF,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,eAAe,CAAA;AAEnD,oCAAoC;AACpC,eAAO,MAAM,YAAY,eAAe,CAAA;AAExC,iFAAiF;AACjF,eAAO,MAAM,kBAAkB,YAAY,CAAA;AAE3C;;;;;;GAMG;AACH,wBAAsB,cAAc,CAClC,WAAW,EAAE,mBAAmB,EAChC,KAAK,EAAE,SAAS,YAAY,EAAE,GAC7B,OAAO,CAAC;IACT,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;IACtB,QAAQ,CAAC,OAAO,EAAE,aAAa,CAAA;IAC/B,QAAQ,CAAC,UAAU,EAAE,SAAS,cAAc,EAAE,CAAA;CAC/C,CAAC,CAyGD"}
+{"version":3,"file":"slides.d.ts","sourceRoot":"","sources":["../../../../src/artifacts/publish/validate/slides.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,kCAAkC,CAAA;AAGpE,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,eAAe,CAAA;AAClD,OAAO,EAAE,KAAK,mBAAmB,EAAqC,MAAM,UAAU,CAAA;AACtF,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,eAAe,CAAA;AAGnD;;;;GAIG;AACH,wBAAsB,cAAc,CAClC,WAAW,EAAE,mBAAmB,EAChC,KAAK,EAAE,SAAS,YAAY,EAAE,GAC7B,OAAO,CAAC;IACT,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAA;IACtB,QAAQ,CAAC,OAAO,EAAE,aAAa,CAAA;IAC/B,QAAQ,CAAC,UAAU,EAAE,SAAS,cAAc,EAAE,CAAA;CAC/C,CAAC,CA6DD"}